Suspicious
Suspect

a55a93669b6fda2d85ea2fcc0a165ce2

Disk Image
MD5: a55a93669b6fda2d85ea2fcc0a165ce2
Size: 1.67 MB

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a55a93669b6fda2d85ea2fcc0a165ce2
Sha1 eb8e98c66ea3f08de054b3dcdae38a6a754087db
Sha256 3e0273d0b3ada87e117da1c421aac04cd2b8aca20a83ba31502bb252363fa44a
Sha384 4fa2cdb01c7cd6b0bdc376b1feac240f53beec379d5ff988ce8a57405c59959a90bff72174e86824a1aa197b17308871
Sha512 3aab98af3386c595f579e740886f1cdb4c188526d4d83837026e2938f7f8b089534d30400ef345fb33949cbb3a56fe3fb94d9de60df49339daa8e8b8d2837927
SSDeep 12288:MwswAXLDXbIYO0Z8pnDV0/tMiPCvErjjHIG84iCV642dzDeDqrTNwjZx:AXLDrDZ8pDV0TCvELHi22hDsqfN
TLSH FD7539CB8C684CA5F4D3C5B35C30CA61F17D778DF41AA94A305C626C2B2B752AF1E2A5
PDF @0x00143000
Text (Preview)
[Authenticode]_2e506e5e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
DE
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1024
ID:1028
ID:1030
ID:1031
ID:1033
ID:1036
ID:1040
ID:1041
ID:1042
ID:1043
ID:1044
ID:1045
ID:1046
ID:1049
ID:1053
ID:1054
ID:1057
ID:1058
ID:1086
ID:2052
ID:2058
ID:3076
ID:3082
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_c5453c24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.eh_fram
.bss
.edata
.idata
.CRT
.tls
.reloc
Text (Preview)
#Stream obj 21 0
#Stream obj 24 0
#Stream obj 16 0
#Stream obj 19 0
#Stream obj 14 0
#Stream obj 14 0-preview.png
#Stream obj 2 0
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6
bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path img:disk>pdf
Shape img:disk>pdf
2 nodes
Name Value
ISO
DiskImage extraction mode: DiscUtils (ISO)
Version
1.7
CreationDate
D:20260827224015+04'00'
Creator
Writer
Producer
LibreOffice 24.2
Version
1.7
CreationDate
D:20260827224015+04'00'
Creator
Writer
Producer
LibreOffice 24.2
/CreationDate
D:20260827224015+04'00'
PDF @0x00143000
Text (Preview)
[Authenticode]_2e506e5e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
DE
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1024
ID:1028
ID:1030
ID:1031
ID:1033
ID:1036
ID:1040
ID:1041
ID:1042
ID:1043
ID:1044
ID:1045
ID:1046
ID:1049
ID:1053
ID:1054
ID:1057
ID:1058
ID:1086
ID:2052
ID:2058
ID:3076
ID:3082
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_c5453c24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.eh_fram
.bss
.edata
.idata
.CRT
.tls
.reloc
Text (Preview)
#Stream obj 21 0
#Stream obj 24 0
#Stream obj 16 0
#Stream obj 19 0
#Stream obj 14 0
#Stream obj 14 0-preview.png
#Stream obj 2 0
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙